$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft File: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft (raw, json) Hash identifier: Z36fG663NgDGA2qo39paTdk2Wwh8RFt6OGGtIEQOPCw= Subject key identifier: 69:7A:85:08:27:DD:1A:5D:69:8A:C7:C1:B5:2C:1E:40:58:58:0E:3E Authority key identifier: 00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF Certificate issuer: /CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Certificate serial: 149126AF910A04A91AC8684EDF86E30C6E56241C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 15:49:14 +0000 Manifest this update: Thu 23 Jul 2026 15:44:14 +0000 Manifest next update: Fri 24 Jul 2026 16:14:14 +0000 Files and hashes: 1: 00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl (hash: VABsGuX4hkdmfhk3EPz97hbzfqaP4XIJBxq4jWhdzu4=) 2: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: Rh9qnUB02qhjNfXj2g1O5tEu9u7bYMmnyx0Vs0JNy30=) 3: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: RevoOpF5++1wWoPWwmQB4PPK000UixnKZHWg4wTOKek=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:91:26:af:91:0a:04:a9:1a:c8:68:4e:df:86:e3:0c:6e:56:24:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00841DBDE5F6CEBF8C94FDEE227771946E2152CF Validity Not Before: Jul 23 15:44:14 2026 GMT Not After : Jul 24 16:14:14 2026 GMT Subject: CN=697A850827DD1A5D698AC7C1B52C1E4058580E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:ee:48:f8:3b:c7:f8:60:9a:b3:dd:55:e4: 66:ae:1e:64:f6:18:bc:5d:d6:92:df:9f:41:eb:7a: 00:16:cf:93:25:bb:1a:54:11:4b:e0:72:8b:27:ef: 35:6a:c0:e1:d9:70:5f:f9:4d:c1:91:5c:9b:33:88: 79:65:9f:00:28:fb:24:b7:f4:30:ca:fa:5b:3b:91: c0:7a:66:33:68:15:ef:96:03:af:5c:05:97:2e:be: 80:50:81:ae:c8:a0:43:84:79:51:e9:e1:79:c7:2e: 72:c7:1f:86:d6:30:f0:1a:92:86:08:25:32:9f:ba: 40:ad:a7:9e:2e:b4:65:a9:52:9a:c5:8f:94:6d:4e: d2:4b:76:87:b3:84:6b:71:55:a3:34:86:44:52:22: 3e:95:31:63:fc:8f:63:85:cd:2e:c4:c1:bf:33:b1: 73:cd:bc:8f:63:d9:d0:b0:95:23:c7:96:f9:47:27: d4:09:49:aa:26:b4:bc:04:b3:78:4f:2a:fe:27:3e: 22:a9:48:78:fa:ad:e5:cb:4b:df:99:20:a0:64:2a: 9b:5b:fd:dc:c8:15:b4:5e:f6:1f:6d:7c:d1:7f:e9: d5:f1:d0:d1:e6:91:15:0b:92:5b:24:ec:17:29:2d: 34:4e:db:52:b9:ff:35:a7:c1:dd:b8:81:49:b8:bf: 3d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7A:85:08:27:DD:1A:5D:69:8A:C7:C1:B5:2C:1E:40:58:58:0E:3E X509v3 Authority Key Identifier: keyid:00:84:1D:BD:E5:F6:CE:BF:8C:94:FD:EE:22:77:71:94:6E:21:52:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/00841DBDE5F6CEBF8C94FDEE227771946E2152CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ee:b6:37:d9:39:25:2c:ca:41:db:41:29:b1:dc:32:38:86: a0:76:46:8b:35:37:bd:d6:3c:d1:10:83:f6:d8:6e:d5:39:5f: 9c:4b:c2:23:af:4c:1e:bc:c2:e4:a7:a3:91:d1:cd:f5:b3:fc: 1c:bb:9b:fb:a4:ab:0a:df:22:99:5a:34:f9:ec:d1:38:a3:92: 0d:a9:a3:4f:4c:9e:48:0a:a7:b3:d3:d9:a4:e6:e9:e9:c6:7e: ff:33:4f:28:78:b7:3d:98:ab:b6:42:7e:69:bd:1f:5d:f0:5c: a0:43:d1:1f:f8:87:00:3a:29:84:95:bf:8a:08:2b:e0:09:77: 67:52:15:db:c8:01:da:6b:0c:fe:8c:8f:ca:50:22:af:28:8d: 6e:a1:ab:4f:ae:c1:c4:f3:cd:29:0b:ec:3b:58:30:ce:27:41: 79:af:02:52:de:15:1e:16:6a:16:4a:ae:26:d1:40:57:dc:b1: 8c:d4:75:be:06:3c:ed:f7:75:84:b3:c0:e8:d6:94:0f:b7:8c: 3f:66:6a:4a:ed:54:da:4e:92:b5:93:e6:dc:ad:6d:a2:d7:28: 04:73:2f:e8:fa:17:a3:28:28:b9:77:a5:f4:40:25:7e:7d:b0: 73:17:9e:1f:fe:4d:3e:b1:ed:e0:5c:14:a7:8a:61:07:cb:5a: a8:97:bc:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJEmr5EKBKkayGhO34bjDG5WJBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2 RTIxNTJDRjAeFw0yNjA3MjMxNTQ0MTRaFw0yNjA3MjQxNjE0MTRaMDMxMTAvBgNV BAMTKDY5N0E4NTA4MjdERDFBNUQ2OThBQzdDMUI1MkMxRTQwNTg1ODBFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+e5I+DvH+GCas91V5GauHmT2 GLxd1pLfn0HregAWz5MluxpUEUvgcosn7zVqwOHZcF/5TcGRXJsziHllnwAo+yS3 9DDK+ls7kcB6ZjNoFe+WA69cBZcuvoBQga7IoEOEeVHp4XnHLnLHH4bWMPAakoYI JTKfukCtp54utGWpUprFj5RtTtJLdoezhGtxVaM0hkRSIj6VMWP8j2OFzS7Ewb8z sXPNvI9j2dCwlSPHlvlHJ9QJSaomtLwEs3hPKv4nPiKpSHj6reXLS9+ZIKBkKptb /dzIFbRe9h9tfNF/6dXx0NHmkRULklsk7BcpLTRO21K5/zWnwd24gUm4vz35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaXqFCCfdGl1pisfBtSweQFhYDj4wHwYDVR0j BBgwFoAUAIQdveX2zr+MlP3uIndxlG4hUs8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDI1MDIyMDUtNWM1NC00N2RiLWFlNmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRF NUY2Q0VCRjhDOTRGREVFMjI3NzcxOTQ2RTIxNTJDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDg0MURCREU1RjZDRUJGOEM5NEZERUUyMjc3NzE5NDZFMjE1 MkNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDI1MDIyMDUtNWM1NC00N2RiLWFl NmYtOWQ0OGUxODMyNDFjLzAvMDA4NDFEQkRFNUY2Q0VCRjhDOTRGREVFMjI3Nzcx OTQ2RTIxNTJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHutjfZOSUsykHbQSmx3DI4hqB2Ros1N73W PNEQg/bYbtU5X5xLwiOvTB68wuSno5HRzfWz/By7m/ukqwrfIplaNPns0Tijkg2p o09MnkgKp7PT2aTm6enGfv8zTyh4tz2Yq7ZCfmm9H13wXKBD0R/4hwA6KYSVv4oI K+AJd2dSFdvIAdprDP6Mj8pQIq8ojW6hq0+uwcTzzSkL7DtYMM4nQXmvAlLeFR4W ahZKribRQFfcsYzUdb4GPO33dYSzwOjWlA+3jD9makrtVNpOkrWT5tytbaLXKARz L+j6F6MoKLl3pfRAJX59sHMXnh/+TT6x7eBcFKeKYQfLWqiXvCQ= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:43 2026 by rpki-client